45
30
60
42
30
55
30
A $25 template helped scammers build hundreds of phantom bank domains
Allure Security researchers found 838 live phantom bank sites sharing a $25 template, built to lend credibility to investment and romance scams.
Allure Security researchers discovered roughly 2,200 domains presenting invented banks, of which 1,095 returned working pages and 838 contained a shared phrase. 97% of those retained parts of the $25 Cuex front-end template and 94% ran Laravel, with a misspelled 'Curreny Charts' heading on 90% of sites. The sites presented login pages, session cookies, and anti-forgery tokens consistent with a fraud model where scam contacts direct victims to fake financial portals. A leftover 'Remedy bank' title and form submission to remedycodes[.]site linked some sites to already-flagged fraud infrastructure.
41
60
55
55
30
30
45
30
30
30
42
30
55
60
60
Multiple Vulnerabilities Discovered in a SCADA System
Unit 42 details five vulnerabilities (CVSS 7.0-7.8) in ICONICS Suite SCADA software enabling privilege escalation and DoS.
Unit 42 discovered five vulnerabilities (CVE-2024-1182, CVE-2024-7587, CVE-2024-8299, CVE-2024-8300, CVE-2024-9852) in ICONICS Suite versions 10.97.2 and earlier for Windows during a 2024 security assessment. The flaws, rated CVSS 7.0-7.8, allow DLL hijacking, privilege escalation, information disclosure, denial-of-service and potentially full system compromise. ICONICS Suite is a SCADA solution with hundreds of thousands of installations in over 100 countries, widely used in critical infrastructure, and several dozen servers are internet-exposed per Unit 42 telemetry. ICONICS released patches and advisories with workarounds in 2024.
52
42
42
30
30
30
57
42
30
30
30
30
55
30
Large Enterprises Targeted in Fake Merger & Acquisition Scams
'Phantom Deal' campaign uses detailed research on large enterprises to trick midlevel employees into initiating large fraudulent merger-related financial transfers.
Dark Reading reports on the 'Phantom Deal' campaign, in which threat actors study target companies in extreme detail before running fake merger and acquisition scams against large enterprises. The social engineering aims to dupe midlevel employees into initiating large financial transfers. The scheme follows a business email compromise-style fraud pattern targeting enterprise finance workflows.
55
⚡ Weekly Recap: Rogue AI Agents, Check Point Exploit, Slopsquatting, ClickFix Lures and More
60
60
55